Security Jul 21
A hacker wiped Romania's land registry and its backups on July 14. An offline copy nobody talks about is the only reason the country still knows who owns what. The cybersecurity industry should be embarrassed.
Security Jun 29
The outrage over a Mullvad co-founder's donation to a Swedish far-right party reveals an uncomfortable truth the privacy movement has dodged for years: universal privacy means protecting people you despise.
Security Jun 28
A GitHub account called Exploitarium is dumping unpatched zero-days with a note to report them yourself. The real story isn't one more irresponsible hacker — it's the industry that made reporting bugs feel like a sucker's game.
Security Jun 21
CVE-2026-32610 is the latest reminder that the CORS spec wasn't designed for the world it now governs — and blaming developers won't fix it.
Security Jun 01
The Red Hat npm compromise isn't a story about supply chain fragility. It's a story about what happens when security researchers publish functional worm code and call it transparency.
Security Jun 01
Cloudflare's Saturday Turnstile update sent the privacy community into orbit. The real story is what their indignation reveals about who actually benefits from frictionless bot detection — and who doesn't.